fmo

joined 1 year ago
[โ€“] fmo@lemmy.world 2 points 11 months ago

I only encrypt the data using LUKS and I have a password stored in Google Secrets Manager. I have a script that runs as a systemd service, goes fetch the password and unlocks the volume. If the drive is somehow stolen, I just revoke the key and the data is unreadable.

[โ€“] fmo@lemmy.world 1 points 1 year ago (2 children)

If you need instant replication then Syncthing is probably your best bet but don't forget to disable the relaying function